When the agent filter is in the URL_POLICY mode, the agent does
not enforce any applicable J2EE declarative security policies. Such policies
along with any calls to J2EE programmatic security API return negative results.